AB#38712 Check user resource ownership

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,38 @@
+---
+name: Bug report
+about: Create a report to help us improve
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**To Reproduce**
+Steps to reproduce the behavior:
+1. Go to '...'
+2. Click on '....'
+3. Scroll down to '....'
+4. See error
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.
+
+**Screenshots**
+If applicable, add screenshots to help explain your problem.
+
+**Desktop (please complete the following information):**
+ - OS: [e.g. iOS]
+ - Browser [e.g. chrome, safari]
+ - Version [e.g. 22]
+
+**Smartphone (please complete the following information):**
+ - Device: [e.g. iPhone6]
+ - OS: [e.g. iOS8.1]
+ - Browser [e.g. stock browser, safari]
+ - Version [e.g. 22]
+
+**Additional context**
+Add any other context about the problem here.

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,20 @@
+---
+name: Feature request
+about: Suggest an idea for this project
+title: ''
+labels: ''
+assignees: ''
+
+---
+
+**Is your feature request related to a problem? Please describe.**
+A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
+
+**Describe the solution you'd like**
+A clear and concise description of what you want to happen.
+
+**Describe alternatives you've considered**
+A clear and concise description of any alternative solutions or features you've considered.
+
+**Additional context**
+Add any other context or screenshots about the feature request here.

.github/pull_request_template.md

@@ -0,0 +1,20 @@
+
+## Overview
+
+Brief description of what this PR does, and why it is needed.
+
+### Demo
+
+Optional. Screenshots, `curl` examples, etc.
+
+### Notes
+
+Optional. Ancillary topics, caveats, alternative strategies that didn't work out, anything else.
+
+## Testing Instructions
+
+* How to test this PR
+* Prefer bulleted description
+* Start after checking out this branch
+* Include any setup required, such as bundling scripts, restarting services, etc.
+* Include test case, and expected output

GraphExplorerAppModeService/Interfaces/IGraphService.cs

@@ -0,0 +1,22 @@
+using Microsoft.Graph;
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using System.Text;
+using System.Threading.Tasks;
+
+namespace GraphExplorerAppModeService.Interfaces
+{
+    /// <summary>
+    /// This class is for functions that call Microsoft Graph to check if the client owns the Teams resource they are trying to call against.
+    /// </summary>
+    public interface IGraphService
+    {
+        /// <summary>
+        /// ErrorMessage will contain the error message from the Graph Client call.
+        /// </summary>
+        string ErrorMessage { get; set; }
+
+        Task<bool> VerifyOwnership(GraphServiceClient graphClient, string query, string clientId);
+    }
+}

GraphExplorerAppModeService/Services/GraphAppAuthProvider.cs

@@ -1,14 +1,6 @@
 using GraphExplorerAppModeService.Interfaces;
-using Microsoft.Extensions.Configuration;
 using Microsoft.Graph;
-using Microsoft.Identity.Web;
-using System;
-using System.Collections.Generic;
-using System.Linq;
 using System.Net.Http.Headers;
-using System.Text;
-using System.Threading.Tasks;
-
 
 namespace GraphExplorerAppModeService.Services
 {

GraphExplorerAppModeService/Services/GraphService.cs

@@ -0,0 +1,77 @@
+using System;
+using System.Collections.Generic;
+using System.Diagnostics;
+using System.Linq;
+using System.Text;
+using System.Threading.Tasks;
+using GraphExplorerAppModeService.Interfaces;
+using Microsoft.Extensions.Configuration;
+using Microsoft.Graph;
+using Newtonsoft.Json;
+
+namespace GraphExplorerAppModeService.Services
+{
+    public class GraphService : IGraphService
+    {
+        private string errorMessage;
+
+        // Docs defined in IGraphService
+        public string ErrorMessage { get; set; }
+
+        public async Task<bool> VerifyOwnership(GraphServiceClient graphClient, string query, string clientId)
+        {
+            string[] queryList = query.Split("/");
+
+            for (int i=0; i < queryList.Length; i++)
+            {
+                if (queryList[i] == "teams" && i + 1 < queryList.Length)
+                {
+                    return await VerifyTeamsOwnership(graphClient, queryList[i + 1], clientId);
+                } else if (queryList[i] == "chats" && i + 1 < queryList.Length)
+                {
+                    return await VerifyChatOwnership(graphClient, queryList[i + 1], clientId);
+                }
+            }
+
+            return false;
+        }
+
+        private async Task<bool> VerifyTeamsOwnership(GraphServiceClient graphClient, string teamId, string clientId)
+        {
+            try
+            {
+                var owners = await graphClient.Groups[teamId].Owners.Request().GetAsync();
+
+                foreach (var owner in owners)
+                {
+                    if (clientId == owner.Id) return true;
+                }
+            }
+            catch (ServiceException e)
+            {
+                ErrorMessage = e.Message;
+            }
+
+            return false;
+        }
+
+        private async Task<bool> VerifyChatOwnership(GraphServiceClient graphClient, string chatId, string clientId)
+        {
+            try
+            {
+                var members = await graphClient.Chats[chatId].Members.Request().GetAsync();
+
+                foreach (AadUserConversationMember member in members)
+                {
+                    if (clientId == member.UserId && member.Roles.Contains("owner")) return true;
+                }
+            }
+            catch (ServiceException e)
+            {
+                ErrorMessage = e.Message;
+            }
+
+            return false;
+        }
+    }
+}